Alex Lotsuโ€™s Post

View profile for Alex Lotsu, graphic

iOS Developer | Writing about Secure Mobile Development

๐——๐—ฒ๐˜ƒ๐—ฒ๐—น๐—ผ๐—ฝ๐—บ๐—ฒ๐—ป๐˜ ๐—ง๐—ถ๐—ฝ ๐˜๐—ผ ๐—ฎ๐˜ƒ๐—ผ๐—ถ๐—ฑ ๐—น๐—ฒ๐—ฎ๐—ธ๐—ถ๐—ป๐—ด ๐˜€๐—ฒ๐—ป๐˜€๐—ถ๐˜๐—ถ๐˜ƒ๐—ฒ ๐—ฑ๐—ฎ๐˜๐—ฎ ๐—ผ๐—ป ๐—ถ๐—ข๐—ฆ Filter properties in your logging system at runtime. ๐—™๐—ถ๐—น๐˜๐—ฒ๐—ฟ ๐—ฝ๐—ฟ๐—ผ๐—ฝ๐—ฒ๐—ฟ๐˜๐—ถ๐—ฒ๐˜€ ๐˜‚๐˜€๐—ถ๐—ป๐—ด ๐—ฅ๐—ฒ๐—ด๐—ฒ๐˜… - use Regex to define specific patterns you can filter your logs with and redact values if any matches are found. ๐—ฃ๐—ฟ๐—ผ: you can define intricate patterns to search for ๐—–๐—ผ๐—ป: you have to handle localisation & formatting yourself ๐—™๐—ถ๐—น๐˜๐—ฒ๐—ฟ ๐—ฝ๐—ฟ๐—ผ๐—ฝ๐—ฒ๐—ฟ๐˜๐—ถ๐—ฒ๐˜€ ๐˜‚๐˜€๐—ถ๐—ป๐—ด ๐—ก๐—ฆ๐——๐—ฎ๐˜๐—ฎ๐——๐—ฒ๐˜๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ - filter common data types (phone numbers, URLs, addresses). It is an approach that requires less work than regex but can fail if the data doesnโ€™t follow common structures. ๐—ฃ๐—ฟ๐—ผ: it handles localisation and formatting for the data types it detects (nicer for international use) ๐—–๐—ผ๐—ป: Less flexible and sometimes won't pick up on patterns if it doesnโ€™t follow a well-known structure (e.g. it will not detect addresses from some countries/areas that don't follow common address formats) ๐—™๐—ถ๐—น๐˜๐—ฒ๐—ฟ ๐—ฝ๐—ฟ๐—ผ๐—ฝ๐—ฒ๐—ฟ๐˜๐—ถ๐—ฒ๐˜€ ๐˜‚๐˜€๐—ถ๐—ป๐—ด ๐—ฎ ๐—•๐—น๐—ฎ๐—ฐ๐—ธ๐—น๐—ถ๐˜€๐˜ - Blacklist specific properties you do not want to log e.g. firstname or lastname and apply this filter across all logs. ๐—ฃ๐—ฟ๐—ผ: very specific matching for the properties you don't want ๐—–๐—ผ๐—ป: very specific matching for the properties you don't want ๐Ÿ˜ฌ #iosdevelopment #security

To view or add a comment, sign in

Explore topics